how to keep transferred emails for n days

[Gambix]

hello,

I am trying to troubleshoot some emails that pass DKIM validation in PMG but fail it when evaluated by internal servers.
I am being asked to get the "message stream" in order to compare it with the message the internal server is using to verify dkim signature.

Question:
can I keep emails that are transferred internally for a number of days?

Mike

 

[Stoiko Ivanov]

I would recommend adding a rule with a BCC action to an address where the mail will then be sent

 

[Gambix]

Stoiko,
I can capture the email when it is received by internal server.
I need the email before it is transferred to the internal server.
Ideally, once the email is received and pmg decides it is good and has to be transferred, it sits on a queue. I need it to be moved to a folder (after it is transferred) instead of being deleted.

 

[Stoiko Ivanov]

As said - the easiiest way is to include a rule with low priority which sends this to a BCC-address - that will be the same mail as your the one going to your downstream server.

else there probably is a way to do something similar with the postfix config - but I'd again recommend trying the easy way first

 

[Gambix]

I am looking for the postfix config needed to do that

Support team for the internal server are asking specifically for that (not a bcc copy on the internal server)

 

[Gambix]

I am looking for the postfix config needed to do that

Support team for the internal server are asking specifically for that (not a bcc copy on the internal server)

better yet,
if during the different stages of pmg processing there are different versions of the email on file, I would need those too.
We are trying to find out why the internal server fails DKIM verification and it could be some changes that occur on headers on the processing by pmg.

 

[Gambix]

I already changed the rule that was adding SPAM to subject because subject is usually involved in DKIM signature. After this, things are better. But still some emails have good DKIM in PMG and then they fail DKIM verification internally.